PRIVACY POLICY

Effective Date: March 2026 Last Updated: March 2026 Platform: Dropfans.io Operator: KVIQVIEW AB, Reg. No. 559552-3852

1. Introduction

This Privacy Policy explains how KVIQVIEW AB ("we," "us," "our," or "the Company"), operating Dropfans.io ("the Platform"), collects, uses, stores, and shares your personal data when you visit or use our Platform.

By accessing or using Dropfans.io, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices, you should not use the Platform.

This policy applies to all visitors, users, fans, and content creators who access or interact with the Platform.

2. Who We Are

The data controller responsible for your personal data is:

• Company: KVIQVIEW AB
• Registration Number: 559552-3852
• Registered Address: Gamla Låssbyvägen 27, Gothenburg, Sweden
• Email: [email protected]
• Website: www.dropfans.io

KVIQVIEW AB is a company registered in Sweden and subject to the EU General Data Protection Regulation (GDPR) and applicable Swedish data protection laws.

3. Data We Collect

We collect the following categories of personal data:

3.1. Account Information

• Email address
• Username and display name
• Password (stored in hashed form)
• Profile information you choose to provide

3.2. Identity Verification Data

• Government-issued identification documents (passport, driver's license, national ID)
• Biometric data used for identity verification (facial recognition data processed by our verification partner)
• Date of birth
• Legal name

3.3. Payment and Transaction Data

• Transaction history (purchases, subscriptions, payouts)
• Billing descriptor references
• Payout information for Creators (bank details, payment method preferences)

Note: Your credit card number and full payment card details are collected and processed directly by our payment processor, Segpay. We do not store or have access to your full card details.

3.4. Usage Data

• Pages visited and features used
• Content viewed and interactions (likes, purchases, subscriptions)
• Search queries on the Platform
• Time and duration of visits

3.5. Device and Technical Data

• IP address
• Browser type and version
• Operating system
• Device type
• Referring URL

3.6. Communications

• Messages sent through the Platform
• Support requests and correspondence
• Notifications preferences

4. How We Collect Data

4.1. Directly From You

• When you create an account or update your profile
• When you complete identity verification (KYC)
• When you make purchases or set up payouts
• When you contact our support team
• When you communicate with other users on the Platform

4.2. Automatically

• Through cookies and similar tracking technologies (see Section 8)
• Through server logs when you access the Platform
• Through analytics tools that collect usage and device data

4.3. From Third Parties

• Segpay (our payment processor) — transaction confirmations, payment status, and fraud screening results
• Our age verification provider — identity verification results and age confirmation
• Google Analytics — anonymized usage statistics

5. How We Use Your Data

We use your personal data for the following purposes:

5.1. Account Management and Platform Operation

• To create and maintain your account
• To authenticate your identity when you log in
• To display your profile to other users as appropriate

5.2. Age and Identity Verification

• To verify that you are at least 18 years of age
• To comply with 18 U.S.C. § 2257 record-keeping requirements
• To prevent fraud and unauthorized access

5.3. Payment Processing

• To process purchases, subscriptions, and tips
• To facilitate Creator payouts
• To detect and prevent fraudulent transactions
• Charges appear on your statement as SEGPAYEU.COM*Dropfans

5.4. Content Moderation and Safety

• To enforce our Terms of Service and content policies
• To detect and remove prohibited content
• To maintain Platform integrity and user safety

5.5. Legal Compliance

• To comply with applicable laws and regulations (including GDPR, 2257, and anti-money laundering requirements)
• To respond to lawful requests from law enforcement or regulatory authorities
• To establish, exercise, or defend legal claims

5.6. Communication

• To send transactional notifications (purchase confirmations, subscription renewals, payout notifications)
• To respond to support inquiries
• To send service-related updates about the Platform

5.7. Analytics and Improvement

• To understand how users interact with the Platform
• To improve our services, features, and user experience
• To monitor Platform performance and stability

6. Data Storage and Security

6.1. Where We Store Your Data

• Our primary database is hosted in the European Union (EU) using encrypted, managed database services.
• Identity verification data is processed and stored by our verification partner in accordance with their security standards and applicable data protection laws.

6.2. Security Measures

• All data transmitted between your device and our servers is encrypted using TLS/SSL.
• Passwords are stored using industry-standard one-way hashing algorithms.
• Access to personal data is restricted to authorized personnel on a need-to-know basis.
• We conduct regular security reviews and maintain appropriate technical and organizational measures to protect your data.

6.3. Payment Security

• Payment card data is handled exclusively by Segpay, which is PCI DSS Level 1 compliant — the highest level of payment security certification. We never store, process, or have access to your full card details.

6.4. Data Retention

• Account data: Retained for the duration of your account and for a reasonable period after deletion to comply with legal obligations.
• Identity verification and 2257 records: Retained for a minimum of 7 years as required by law.
• Transaction records: Retained for 7 years for tax, accounting, and legal compliance.
• Usage and analytics data: Retained in anonymized or aggregated form.
• Communications: Retained for the duration of your account unless earlier deletion is requested and permitted by law.

7. Data Sharing

We do not sell your personal data. We share your data only in the following circumstances:

7.1. Payment Processor — Segpay We share necessary transaction data with Segpay to process payments. Segpay operates as an independent data controller for the payment data it processes. For more information, see Segpay's Privacy Policy.

7.2. Identity Verification We share identity documents and biometric data with our age verification provider for the purpose of age and identity verification. This provider processes this data in accordance with their privacy policy and applicable data protection laws.

7.3. Analytics — Google We use Google Analytics to collect anonymized usage data. Google may process this data in accordance with Google's Privacy Policy.

7.4. Law Enforcement and Legal Obligations We may disclose your data to law enforcement agencies, regulatory authorities, or courts when required by law, or when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation
• Protect the safety of our users or the public
• Prevent fraud or illegal activity
• Protect our rights or property

7.5. Business Transfers In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you of any such change.

7.6. Creator-User Interactions

• Creators do not receive your real name, email address, payment details, or identity documents.
• Creators may see your username and any information you voluntarily share through the Platform.

8. Cookies and Tracking Tools

We use cookies and similar technologies to operate the Platform, analyze usage, and remember your preferences.

Tracking tools we use:

• Essential cookies — for authentication, session management, and security
• Google Analytics — for anonymous usage statistics and Platform improvement
• Preference cookies — to remember your settings (e.g., cookie consent choice)

For detailed information about the cookies we use, how to manage them, and how to opt out, please see our Cookie Policy.

You can opt out of analytics tracking by:

• Selecting "Essential Only" in our cookie consent banner
• Using browser settings to block third-party cookies
• Installing the Google Analytics Opt-Out Browser Add-on

9. Your Rights and Choices

9.1. General Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Data Portability: Request your data in a structured, commonly used, machine-readable format.
• Opt-Out of Marketing: You may opt out of non-essential communications at any time by updating your notification settings or contacting us.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

9.2. Rights for EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the GDPR, including:

• The right to restrict processing of your personal data.
• The right to object to processing based on legitimate interests.
• The right to lodge a complaint with your local data protection authority. In Sweden, this is Integritetsskyddsmyndigheten (IMY) — www.imy.se.

9.3. Rights for California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose.
• Request deletion of your personal information.
• Opt out of the sale of personal information. We do not sell your personal information.
• Non-discrimination for exercising your privacy rights.

9.4. How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.

10. International Data Transfers

KVIQVIEW AB is based in Sweden (EU). Your data is primarily stored and processed within the EU. However, some of our service providers (such as analytics or infrastructure providers) may process data outside the EU/EEA.

Where data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Other lawful transfer mechanisms under the GDPR

11. Children's Privacy

Dropfans.io is strictly an 18+ platform. We do not knowingly collect personal data from anyone under 18 years of age (or the age of majority in their jurisdiction, whichever is higher).

All users must complete age verification before accessing content on the Platform. If we discover that we have collected data from a minor, we will delete the account and associated data immediately.

If you believe a minor has provided us with personal data, please contact us at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy.
• Notify registered users via email or a prominent notice on the Platform.

We encourage you to review this policy periodically. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Company: KVIQVIEW AB
• Registration Number: 559552-3852
• Address: Gamla Låssbyvägen 27, Gothenburg, Sweden

For GDPR-related inquiries, you may also contact your local data protection authority.

By using Dropfans.io, you acknowledge that you have read and understood this Privacy Policy.